You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Giles Coochey <gi...@coochey.net> on 2011/01/28 13:43:30 UTC

[users@httpd] Reverse Proxy will multiple IPs in same subnet

Hi,

I'm setting up a reverse proxy with multiple IP addresses.

Multiple instances of apache listen on multiple IP addresses in the same 
subnet.

My question is...

If a reverse proxy is setup to listen on eth0:1 with IP address 10.4.4.10

and eth0 is 10.4.4.5 in the same subnet.

 From a firewall perspective, will the proxy request appear to come from 
10.4.4.10 or 10.4.4.5?

route shows the following entry:

Destination    Gateway    Genmask    Flags    Metric    Ref    Use    Iface
default            gateway     0.0.0.0         UG         0             
0         0         eth0

So my guess is that the reverse proxy request will exit the proxy with 
10.4.4.5, even if apache is listening on 10.4.4.10 ???

Am I right??

-- 
Best Regards,

Giles Coochey
NetSecSpec Ltd
NL T-Systems Mobile: +31 681 265 086
NL Mobile: +31 626 508 131
GIB Mobile: +350 5401 6693
Email/MSN/Live Messenger: giles@coochey.net
Skype: gilescoochey




Re: [users@httpd] Reverse Proxy will multiple IPs in same subnet

Posted by Saxa Egea <sa...@saxa.dyndns.org>.
  El 28/01/2011 14:04, Giles Coochey escribió:
> On 28/01/2011 13:43, Giles Coochey wrote:
>> Hi,
>>
>> I'm setting up a reverse proxy with multiple IP addresses.
>>
>> Multiple instances of apache listen on multiple IP addresses in the 
>> same subnet.
>>
>> My question is...
>>
>> If a reverse proxy is setup to listen on eth0:1 with IP address 
>> 10.4.4.10
>>
>> and eth0 is 10.4.4.5 in the same subnet.
>>
>> From a firewall perspective, will the proxy request appear to come 
>> from 10.4.4.10 or 10.4.4.5?
>>
>> route shows the following entry:
>>
>> Destination    Gateway    Genmask    Flags    Metric    Ref    Use    
>> Iface
>> default            gateway     0.0.0.0         UG         
>> 0             0         0         eth0
>>
>> So my guess is that the reverse proxy request will exit the proxy 
>> with 10.4.4.5, even if apache is listening on 10.4.4.10 ???
>>
>> Am I right??
>>
> Damn my impatience... I did a packet capture and tested it. Yes, it 
> appears so. The address of eth0 is used 10.4.4.5.
>
This probably is a routing problem.

If you create specific routes linked to device you can solve it.



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Reverse Proxy will multiple IPs in same subnet

Posted by Giles Coochey <gi...@coochey.net>.
On 28/01/2011 13:43, Giles Coochey wrote:
> Hi,
>
> I'm setting up a reverse proxy with multiple IP addresses.
>
> Multiple instances of apache listen on multiple IP addresses in the 
> same subnet.
>
> My question is...
>
> If a reverse proxy is setup to listen on eth0:1 with IP address 10.4.4.10
>
> and eth0 is 10.4.4.5 in the same subnet.
>
> From a firewall perspective, will the proxy request appear to come 
> from 10.4.4.10 or 10.4.4.5?
>
> route shows the following entry:
>
> Destination    Gateway    Genmask    Flags    Metric    Ref    Use    
> Iface
> default            gateway     0.0.0.0         UG         
> 0             0         0         eth0
>
> So my guess is that the reverse proxy request will exit the proxy with 
> 10.4.4.5, even if apache is listening on 10.4.4.10 ???
>
> Am I right??
>
Damn my impatience... I did a packet capture and tested it. Yes, it 
appears so. The address of eth0 is used 10.4.4.5.

-- 
Best Regards,

Giles Coochey
NetSecSpec Ltd
NL T-Systems Mobile: +31 681 265 086
NL Mobile: +31 626 508 131
GIB Mobile: +350 5401 6693
Email/MSN/Live Messenger: giles@coochey.net
Skype: gilescoochey